8 matches found
Log4J_Exploitation-Vulnerabiliy__CVE-2021-44228
Log4JExploitation-VulnerabiliyCVE-2021-44228. مقدمة تم اكتشاف ثغرة تنفيذ تعليمات برمجية عن بُعد Remote Code Execution تتعلق بمكتبة تسجيل Java وهي Log4j. CVE-2021-44228 أحدثت هذه الثغرة ضجة كبيرة في مجتمع الأمن السيبراني العالمي؛ فمنذ Wannacry لم نشهد تأثيرًا بهذا الحجم. السبب: يُعتقد أن معظم...
cve-2021-44228-log4shell_rce_reproduction
CVE-2021-44228 — Log4Shell: Esecuzione di codice remota in Apache Log4j2 CVSS 10.0 CRITICA | CWE-502: Deserializzazione di dati non attendibili | CWE-917: Neutralizzazione impropria per l'iniezione di Expression Language Panoramica Log4Shell CVE-2021-44228 è probabilmente la vulnerabilità più gra...
CVE-2022-31095
discourse-chat is a chat plugin for the Discourse application. Versions prior to 0.4 are vulnerable to an exposure of sensitive information, where an attacker who knows the message ID for a channel they do not have access to can view that message using the chat message lookup endpoint, primarily...
CVE-2022-31095 Exposure of Sensitive Information in discourse-chat
discourse-chat is a chat plugin for the Discourse application. Versions prior to 0.4 are vulnerable to an exposure of sensitive information, where an attacker who knows the message ID for a channel they do not have access to can view that message using the chat message lookup endpoint, primarily...
FreeBSD : OpenSearch -- Log4Shell (b0f49cb9-6736-11ec-9eea-589cfc007716)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b0f49cb9-6736-11ec-9eea-589cfc007716 advisory. - It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain...
Apache Log4Shell CVE-2021-45046 Bypass Remote Code Execution
Binary data apachelog4shellCVE-2021-45056directcheck.nbin...
CVE-2021-45046
It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map MDC input data when the logging configuration uses a non-default Pattern Layout with either a Context...